9elements / converged-security-suite

Converged Security Suite for Intel & AMD platform security features
https://www.9esec.io
BSD 3-Clause "New" or "Revised" License
56 stars 15 forks source link

Add a skeleton of redesigned "pcr" package #330

Closed xaionaro closed 2 years ago

xaionaro commented 2 years ago

Adding the main entities of a new design of PCR values calculations process. New package is called "bootflow" (instead of "pcr"), since it is not longer focused on PCR values only. It also supports other roots of trust for storage and measurements.

New design (in contrast to the old one) is:

uml

UML is generated by command:

goplantuml -recursive pkg/bootflow/ | sed -e 's/\#\.\./\*--/g' | sed -re 's/\[\]([^b])/\1/g'

An example of a flow description: https://github.com/9elements/converged-security-suite/pull/330/files#diff-27af1a8ff010eb439ee11da802024b19fbf9bf11ea6580efcbfed47f54135c89R9-R15

xaionaro commented 2 years ago

It was a work-in-progress :)

ChriMarMe commented 2 years ago

This got closed due to change of default branch from master to main. Rebase on main and rename branch, open PR again is a legit move here.